Identity AI Security Architect

Wipro Limited (NYSE: WIT BSE: 507685 NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting design engineering and operations we help clients realize their boldest ambitions and build future-ready sustainable businesses. With over 230000 employees and business partners across 65 countries we deliver on the promise of helping our customers colleagues and communities thrive in an ever-changing world. For additional information visit us at .

Job Description

Title: IndentityAI Security Architect

Location: Remote

Duration: Full Time

Identity: NHI & AI security

• Reference architecture for AI agent identity: registration attestation credential issuance scoping revocation
• Delegation and on-behalf-of patterns token exchange audience restriction downscoping across multi-agent call chains
• Tool/function invocation authorization: per-tool entitlement policy enforcement at the agent or LLM gateway approval gates for high-consequence actions
• MCP and tool-protocol security server trust tool-definition integrity confused-deputy prevention
• Containment patterns that assume the reasoning layer is compromised and enforce least privilege at the identity layer
• Workload identity to replace long-lived secrets: SPIFFE/SPIRE cloud workload identity federation mTLS short-lived credentials
• NHI discovery ownership recertification and deprovisioning integrated into existing IGA
• Behavioral telemetry for agent and workload identity misuse; threat models via MITRE ATLAS and OWASP LLM Top 10

Enterprise architecture

• Security reference architecture patterns standards exception governance
• Zero trust across identity device network app data
• IAM/IGA/PAM multi-cloud security DevSecOps and supply chain cryptography and key management
• Executive and audit advisory; mentorship of senior architects

Required

• 12 years security 5 in senior/principal architecture at enterprise scale
• Deep identity architecture ownership across workforce privileged and machine identity
• Command of OAuth 2.0/2.1 OIDC JWT RFC 8693 token exchange mTLS ABAC/ReBAC policy-as-code
• Hands-on securing production AI or agentic systems
• Secrets management and workload identity platforms; cloud security depth in two or more providers
• Codes well enough to prototype and review application code in design sessions

Preferred

• Production MCP servers agent frameworks or LLM gateways
• IETF WIMSE and emerging machine identity standards
• NHI security tooling; machine identity in SailPoint/Saviynt
• Regulated industry experience (FedRAMP DFARS/CMMC PCI DSS NERC CIP)

Do

1. Design and develop enterprise cyber security strategy and architecture

a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses

b. Identify risks associated with business processes operations

information security programs and technology projects

c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge

d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements

e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security Zoning Integration aspects API Endpoint security Data security Compliance and regulations

f. Demonstrate experience in doing security assessment against NIST Frameworks SANS CIS etc.

g. Provide support during technical deployment configuration integration and administration of security technologies

h. Demonstrate experience around ITIL or Key process-oriented domains like incident management configuration management change management problem management etc.

i. Provide assistance for disaster recovery in the event of any security breaches attacks intrusions and unusual unauthorized or illegal activity

j. Provide solution of RFP s received from clients and ensure overall design assurance

i. Develop a direction to manage the portfolio of to-be-solutions including systems shared infrastructure services applications hardware related to cyber risk security in order to better match business outcome objectives

ii. Analyse technology environment enterprise specifics client requirements to set a collaboration design framework/ architecture

iii. Depending on the client s need with particular standards and technology stacks create complete RFPs

iv. Provide technical leadership to the design development and implementation of custom solutions through thoughtful use of modern technology

v. Define and understand current state solutions and identify improvements options & tradeoffs to define target state solutions

vi. Clearly articulate and sell architectural targets recommendations and reusable patterns and accordingly propose investment roadmaps

vii. Evaluate and recommend solutions to integrate with overall technology ecosystem

viii. Tracks industry and application trends and relates these to planning current and future IT needs

2. Stakeholder coordination & audit assistance

a. Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations

b. Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security

c. Support audit of security best practices and implementation of security principles across the organization to meet business goals along with customer and regulatory requirements

d. Assist with the creation maintenance and delivery of cyber security awareness training to team members and customers

e. Provide training to employees on issues such as spam and unwanted or malicious emails

Deliver

No	PerformanceParameter	Measure
1	Customer centricity	Timely security breach solutioning to end users Internal stakeholders & external customers experience CSAT educating and suggesting right control to the customers.
2	Support sales team to create wins	% of proposals with Quality Index >7 timely support of the proposals identifying opportunities/ leads to sell services within/ outside account (lead generation) no. of proposals led

Mandatory Skills: IDAM Security Consulting.

Experience: >10 YEARS.

The expected compensation for this role ranges from $100000 to $200000 .

Final compensation will depend on various factors including your geographical location minimum wage obligations skills and relevant experience. Based on the position the role is also eligible for Wipros standard benefits including a full range of medical and dental benefits options disability insurance paid time off (inclusive of sick leave) other paid and unpaid leave options.

Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening subject to applicable state law.

Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws. Applications from veterans and people with disabilities are explicitly welcome.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them we need people inspired by reinvention. Of yourself your career and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.

Required Experience:

Staff IC